Privacy Policy
Thank you for your interest in our house. The protection of your personal data is important to us. Below we inform you, in accordance with the General Data Protection Regulation (GDPR), about the processing of your data when you visit this website.
1. Controller
The controller responsible for data processing on this website is:
Hotel Griesbräu zu MurnauOwner: Michael Gilg
Obermarkt 37
82418 Murnau am Staffelsee
Germany
Phone: +49 8841 1422
E-mail: info@griesbraeu.de
A data protection officer is not required by law and has not been appointed. [If one has been appointed, add their contact details here.]
2. Hosting and server log files
This website is hosted by an external service provider: [add hosting provider, e.g. Hostinger, with address]. The provider processes the data collected via this website on our behalf (order processing in accordance with Art. 28 GDPR).
When the website is accessed, the server automatically records information in what are known as server log files, which your browser transmits. These are in particular:
- anonymised or shortened IP address
- date and time of access
- page or file requested
- browser type and operating system used
- referrer URL (previously visited page)
Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of the website. The log files are deleted after a short time, unless they are required to investigate malfunctions or misuse. [Add the specific storage period stated by the host, e.g. 7 to 30 days.]
3. Local fonts
This website uses exclusively fonts stored locally on our server (Fraunces and Mulish). There is no connection to Google Fonts or other external font services. No data is therefore transmitted to third parties when the fonts are loaded.
4. Contacting us
If you contact us by e-mail or telephone (for example to reserve a table or a room), we process the information you provide in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) as well as Art. 6 (1) (f) GDPR (legitimate interest in responding to your request).
Your details will be deleted as soon as they are no longer required for the purpose of processing and no statutory retention obligations prevent deletion. [If a contact or reservation form is used, add here: fields collected, recipients and legal basis.]
5. Local storage, no tracking cookies
This website does not use any tracking or marketing cookies and does not integrate any analytics or advertising services. To provide a convenient experience, only technically necessary local storage in your browser is used, in order to remember your voluntary choices:
- your design choice (light or dark appearance)
- confirmation of the cookie or privacy notice
This information remains solely in your browser and is not transmitted to us or to third parties. The legal basis is Art. 6 (1) (f) GDPR; the storage is technically necessary for the convenience you have requested. You can delete the stored values at any time via your browser settings.
6. Embedded map (OpenStreetMap)
To show our location, you can load a map from OpenStreetMap if you wish. The map is not loaded automatically: only when you actively click on „Load map“ is a connection to the OpenStreetMap servers established and your IP address transmitted to them. Without this click, no data is transferred.
The provider is the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The legal basis for loading after your click is Art. 6 (1) (a) GDPR (consent). Information on OpenStreetMap's data protection: wiki.osmfoundation.org/wiki/Privacy_Policy.
7. Your rights as a data subject
Within the framework of the statutory provisions, you have the following rights:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to object to processing (Art. 21 GDPR)
- right to withdraw consent given (Art. 7 (3) GDPR)
To exercise your rights, an informal message to the contact details listed under point 1 above is sufficient.
8. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA)Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de
9. SSL and TLS encryption
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the „https://“ in the address bar of your browser and by the lock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.
10. Currency of this policy
We adjust this privacy policy as soon as changes to the data we process or to the services we use make this necessary.
Last updated: [Last updated: DD.MM.YYYY]